AI scanning goes official

GitHub has made its AI vulnerability scanner available as an official offering, extending automated security analysis to code written in PHP and Terraform, the widely used infrastructure-as-code tool. The feature uses AI to identify potential security weaknesses in code before it is deployed.

The launch moves the scanning capability beyond its earlier testing phase into general availability, allowing developers working in PHP and Terraform environments to run AI-assisted vulnerability checks directly within GitHub's platform.

Focus on PHP and Terraform

PHP remains one of the most common languages for web applications, while Terraform is broadly used to define cloud infrastructure in code. Both are environments where undetected vulnerabilities can carry significant security consequences, making automated scanning a priority target for AI-based review.

By applying AI models to these two areas, GitHub aims to catch flaws that traditional static analysis rules may miss, flagging insecure patterns in application code and infrastructure definitions alike.

The official release positions the scanner alongside GitHub's existing developer security toolset, giving teams an automated first line of defense against vulnerabilities in both application and infrastructure code.

The claim that GitHub has officially launched its AI scanning feature for finding vulnerabilities in PHP and Terraform code is true.

Verdict: True